Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: IwG8Q77T8OSSK1VrazKmpYlsrLsJguDe0r8m5JuB7N4=
Subject key identifier: 22:00:AC:89:E7:43:E7:2B:51:D3:F6:DB:63:DA:12:D1:AC:11:0E:5E
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 019A50E33E7C62A9E1F73A09DC6068689A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 01EC
Signing time: Tue 04 Nov 2025 22:01:01 +0000
Manifest this update: Tue 04 Nov 2025 22:01:01 +0000
Manifest next update: Wed 05 Nov 2025 22:01:01 +0000
Files and hashes: 1: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: /DEYGAqbXGu+82SwalR2LQOEEsq+4QfE4djNstQ9Ots=)
2: pjCkQXuBbqOHzoKD1mw-qrFiWGY.roa (hash: MiX/u7zxhzpsdUN3cx+sdMgoTiE427DJRykzUPzL3BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:3e:7c:62:a9:e1:f7:3a:09:dc:60:68:68:9a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Nov 4 22:01:01 2025 GMT
Not After : Nov 5 22:01:01 2025 GMT
Subject: CN=2200ac89e743e72b51d3f6db63da12d1ac110e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:ba:72:fe:65:ee:89:f6:e1:d1:68:54:87:
16:2f:13:56:f0:7a:66:59:e4:12:60:ed:a6:d7:91:
ae:97:27:f7:7b:95:57:ca:18:e6:b0:6e:e9:5a:89:
b8:14:af:8d:1e:00:ef:5d:75:c8:0c:53:6e:33:74:
07:6f:ba:d1:f6:7a:b6:67:d4:ea:94:6f:f8:9e:f5:
0f:d3:ea:bb:c0:50:f4:f8:ea:5a:89:9f:a2:e6:59:
76:78:ee:e7:39:46:00:c4:f0:2e:c3:60:38:0b:eb:
bb:28:f5:d2:3e:15:0a:13:44:44:50:cc:1a:71:20:
41:f9:ef:26:c2:d9:25:94:ca:20:1a:84:d3:e1:bd:
7e:02:a5:8a:eb:27:c1:d5:f7:0c:4e:01:63:a0:70:
4a:56:24:f4:82:ac:f9:74:5b:84:b4:4b:e5:5a:1e:
1a:44:b7:b2:fb:08:4a:c0:53:9f:7e:86:86:42:b4:
32:41:25:f0:af:97:6a:13:f4:0e:1c:71:35:8f:21:
bc:34:33:2f:bd:4a:13:b0:67:44:b2:30:e4:30:dd:
5e:d1:72:b8:de:81:b0:c5:5f:66:9d:8c:ae:e3:7a:
65:3c:16:ac:52:b5:c9:33:4f:08:5f:38:df:a5:c9:
05:0a:36:b0:79:9f:4a:cc:cd:32:a9:3b:b7:8a:34:
f4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:00:AC:89:E7:43:E7:2B:51:D3:F6:DB:63:DA:12:D1:AC:11:0E:5E
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:48:6a:1f:13:65:ac:df:61:e5:d7:02:15:26:a3:aa:63:21:
32:d1:14:9e:fb:d9:d5:7e:7f:97:f0:75:c1:6e:c9:e1:47:0f:
57:3b:17:20:09:35:a2:ee:c6:83:17:b6:3a:9c:72:01:42:a0:
2e:b4:fa:b2:55:83:6c:b9:34:0f:12:97:e8:ff:74:fb:d5:94:
1d:00:10:71:ab:7d:30:d8:dc:5a:ac:04:ea:7c:81:e1:c5:cb:
2a:77:b0:67:c0:2f:b9:4a:25:e4:9d:27:cb:bd:14:55:4b:03:
49:ef:c1:e8:2f:dc:80:52:a4:81:29:81:60:d7:e5:ea:69:07:
2a:b9:bb:80:ea:54:e0:1c:63:34:7b:40:9a:2b:e2:1d:28:f6:
c0:55:61:63:72:81:85:25:c9:59:dd:cf:e5:32:95:29:65:c1:
9f:2a:9f:25:b2:76:f9:a8:a3:a4:cb:14:71:b0:19:f9:13:03:
5f:74:0d:2f:b4:ff:6c:c2:f1:15:8a:aa:99:cd:d1:95:9a:0b:
fa:e9:b5:c5:f0:f8:0c:72:78:e3:8d:ad:ec:10:fc:d1:5e:56:
12:82:5d:1b:ca:46:1c:55:89:78:07:67:de:f5:33:bb:12:48:
72:bd:22:f1:5e:10:63:53:d1:aa:57:1d:3b:cd:99:3f:3c:77:
dc:75:b8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:55:17 2025 by rpki-client